30936 matches found
CVE-2026-52492
An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...
CVE-2026-56135
In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted...
CVE-2026-52492
The libtiff library is vulnerable to an integer overflow in the rgb2ycbcr utility's cvtRaster() function. When computing strip buffer sizes, this overflow can lead to an undersized heap allocation , resulting in a heap-based buffer overflow during the YCbCr conversion of a crafted TIFF image. Thi...
EUVD-2026-65145
An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...
RHEL 9 : libtiff (RHSA-2026:58556)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:58556 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: libtiff: Heap-bas...
NVIDIA TensorRT ONNX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA TensorRT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ONN...
ALSA-2026:59152 Important: gstreamer1-plugins-good security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer: GStreamer: Remote Code Execution via MRF fil...
ALSA-2026:58938 Important: sqlite security update
SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...
CVE-2026-56135
In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted...
qemu-kvm security, bug fix, and enhancement update
10.1.0-16.el102.5 - kvm-file-posix-populate-pwritezeroesalignment.patch RHEL-207389 - kvm-block-use-pwritezeroesalignment-when-writing-first.patch RHEL-207389 - kvm-iotests-add-Linux-loop-device-image-creation-test.patch RHEL-207389 - Resolves: RHEL-207389 qemu-img create/convert fails on target...
CVE-2026-56135
In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted...
PT-2026-81033
Name of the Vulnerable Software and Affected Versions libtiff affected versions not specified Description An integer overflow occurs in the cvtRaster function of the rgb2ycbcr utility when calculating strip buffer sizes. This can lead to an undersized heap allocation, resulting in a heap-based...
PT-2026-85319
An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...
PT-2026-80850
Name of the Vulnerable Software and Affected Versions RustDesk affected versions not specified Description Windows clipboard redirection fails to perform an upper bound check when copying a peer-supplied length into a fixed-size caller buffer. When an OLE paste consumer, such as explorer.exe, cal...
CVE-2026-56135
A heap-based buffer overflow exists in the NTFS-3G driver (versions through 2026.2.25 ) within the build_inherited_id() function in libntfs-3g/security.c. An attacker can corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image and creating a file in a specially craf...
CVE-2026-52492
An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...
ALSA-2026:58571 Moderate: qemu-kvm security, bug fix, and enhancement update
Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fixes: qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling...
PT-2026-80897
A heap-based buffer overflow vulnerability exists in Konami's Metal Gear Online 3, originating from improper validation of lobby data fields related to kicked players. The affected function processes a list of kicked player identifiers using the lobby data key "kick num" to determine the number o...
CVE-2026-52492
An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...
gstreamer1-plugins-good security update
1.22.12-7.8 - Fix CVE-2026-18299: Use-After-Free in rtpsbcdepay Resolves: RHEL-246619 1.22.12-7.7 - Fix CVE-2026-18296: size validation in qtmoovrecover MRF parsing Resolves: RHEL-246558 1.22.12-7.6 - Fix CVE-2026-18298 in gdkpixbufdec element Resolves: RHEL-246572 1.22.12-7.5 - Fix CVE-2026-1829...